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(54) 1 Keyless motor vehicle entry and ignition system 



(57) A keyless control system is disclosed which 
may be employed to gain entry to a motor vehicle and 
start an engine. When using this system, a user acti- 
vates a remote control by selecting a function for the 
motor vehicle to perform. In response, a challenge 
number is exchanged and used in an encryption algo- 
rithm by both the remote control and a control circuit in 
the motor vehicle to produce independently of each 
other separate algorithm answers. A first verification 
indication is produced when the control circuit finds both 



answers to be the same. The remote control also sends 
its unique remote control identification and a designa- 
tion of the selected function to the control circuit. If the 
received remote control identification matches is on an 
authorized remote control list stored in the control cir- 
cuit, a second verification indication is produced. When 
both the first and second verification indications are pro- 
duced, the control circuit issues a signal that causes the 
motor vehicle to perform the selected function. 
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Description 

Background Of The Invention 

The present invention relates to keyless systems for 
gaining entry and starting motor vehicles. 

Automobiles traditionally were vulnerable to theft by 
a criminal forcibly removing the ignition lock cylinder 
thereby being able to start the vehicle without a key. 
With the advent of microprocessor based engine control 
systems came the ability to provide more sophisticated 
ignition control. Today many ignition keys have different 
types of electronic devices embedded in them which 
contain a special code for the key. When the key is 
inserted into the ignition lock, the vehicle reads the code 
from the key and the on-board computer system only 
responds to operation of the ignition switch by a prop- 
erly encoded key. Thus the motor vehicle can not be 
started without that key, even if the ignition switch is 
turned somehow. 

The advent of more sophisticated electronics in 
motor vehicle also has enabled remote keyless vehicle 
entry (RKE) systems to be provided to the driver. These 
commonly take the form of a fob which is attached to the 
driver's key ring. The fob houses a radio transmitter 
which sends a digital numerical value via a radio fre- 
quency (RF) signal to the vehicle when the driver press- 
ing the appropriate switch on the fob. The digital 
numerical value prevents spurious radio frequencies 
from activating the motor vehicle circuitry, as well as 
making it difficult for unauthorized persons to gain 
access to the motor vehicle. The RF signal also 
encodes whether the user wishes the doors to be 
locked, unlocked or the trunk to be unlatched. A receiver 
mounted in the motor vehicle detects the transmission 
from the fob and decodes the RF signal to determine 
whether it is valid for that vehicle and which of the vari- 
ous functions is to be performed. The receiver then acti- 
vates the appropriate components within the motor 
vehicle to perform that function. 

Although the digital numerical value make it very 
difficult for unauthorized persons to gain access to the 
motor vehicle, concern has been expressed that some 
one with a radio receiver and a digital signal analyzer 
could eavesdrop on the radio transmissions and learn 
the security numbers. Thus a thief could "stake out" a 
valuable vehicle to await the return of the driver and 
learn the security numbers. Those security numbers 
then could be utilized to steal that vehicle at a later point 
in time. 

To improve the security of remote keyless entry sys- 
tems and deter eavesdropping, a "rolling code" security 
number is transmitted between the fob and the motor 
vehicle. In this technique both the motor vehicle and the 
fob were encoded with the identical initial security 
number during manufacture. Thereafter, each time a 
button on the fob was pressed, the previous security 
number is incremented by a value which is derived 



using a predefined algorithm. The resultant new secu- 
rity number then is transmitted to the motor vehicle and 
stored in the fob in place of the previous security 
number. 

5 Upon receipt of a security number from the fot* cir- 

cuitry in the motor vehicle retrieves the previously valid 
security number which it had stored. The motor vehicle 
circuitry then employs the same algorithm to increment 
the retrieved security number to produce its own new 

10 security number. In theory, both the fob and the motor 
vehicle should be synchronized so that their respective 
execution of the algorithm will produce identical new 
security numbers. Thus, a match between the security 
number received from the fob and new security number 

is derived in the motor vehicle indicates a signal has been 
received from an authorized fob. This rolling code tech- 
nique provides a greatly enhanced level of security and 
operates extremely well as long the security numbers in 
both the fob and the motor vehicle remain synchronized. 

20 However, if a button on the fob is accidentally 
pressed when the motor vehicle is beyond the fob's 
transmission range, the rolling security number in the 
fob will be incremented without a corresponding incre- 
mentation of the security number in the motor vehicle. 

25 As a consequences, matches between the two codes 
will no longer occur and the authorized fob will not be 
recognized by the motor vehicle. One solution to this 
non-synchronization problem is for the motor vehicle to 
generate multiple subsequent security numbers using 

30 the rolling code algorithm and accept a fob signal as 
valid if any one of those subsequent security numbers 
matches the one received from the fob. However, this 
technique greatly reduces the number of possible secu- 
rity numbers since during each validation test the motor 

35 vehicle will accept multiple security numbers as being 
valid. Furthermore, the rolling code technique precludes 
the use of multiple authorized fobs for the same motor 
vehicle. 

It is desirable to provide the remote keyless entry 
40 system with the ability to start the motor vehicle by add- 
ing another button to the fob. However, this latter func- 
tion requires a higher level of security than that which is 
presently used to guard against unauthorized opening 
of the doors and trunk of the vehicle. In addition, the 
45 security provided for the ignition feature must also pre- 
vent an unauthorized person with the appropriate elec- 
tronic equipment from being able to eavesdrop on the 
radio transmissions and learn the security numbers uti- 
lized to operate the vehicle. 
so Thus, it is desirable to provide a key fob with more 
activation features and a higher level of security. 

Summary Of The Invention 

55 A general object of the present invention is to pro- 
vide a remote keyless vehicle activation system which 
has a high level of security for the transmitted signals. 
Another object is to provide a means for encrypting 
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the information being transmitted by the remote keyless 
system. 

A further object of the present invention is to pro- 
vide the rolling code security technique which still allows 
the use of multiple authorized fobs for the same motor 
vehicle. 

Yet another object is to provide bi-directional data 
transmission between the motor vehicle and the keyless 
activating device to provide an enhanced level of secu- 
rity. 

A still further object of the present invention is to uti- 
lize a bi-directional data transmission system to enable 
storage of ancillary data about the driver or the vehicle 
in the keyless activation device. 

These and other objectives are satisfied by a key- 
less motor vehicle control system having a portable 
transponder by which a user selects a function to per- 
form, and including a control circuit in the motor vehicle. 
The method of operation for the control system includes 
storing identical seed data and a transponder identifica- 
tion into the control circuit and the transponder. 

When the user selects a function on the trans- 
ponder, challenge data is exchanged between the con- 
trol circuit and the portable transponder. Preferably the 
challenge data is randomly generated each time that its 
use is required. Then the control circuit executes an 
encryption algorithm which uses the seed data and the 
challenge data to produce a first answer. The trans- 
ponder also executes the same encryption algorithm 
using the seed data and the challenge data, thereby 
producing a second answer which is transmitted to the 
control circuit. The transponder also transmits its trans- 
ponder identification to the control circuit. 

The control circuit compares the first and second 
answers and produces a first indication when a match 
occurs. The control circuit also determines whether the 
transponder identification received from the trans- 
ponder matches a transponder identification that had 
been stored previously in the control circuit and if so t a 
second indication is produced. When both the first and 
second indications are produced, a control signal is 
generated for activating the motor vehicle function that 
was selected by the user. 

This keyless vehicle control system implements a 
rolling code security system without requiring synchro- 
nized independent generation of the rolling code by 
both the transponder and the motor vehicle control cirr 
curt. A very large number of combinations can be uti- 
lized with a single combination assigned to a given 
motor vehicle and a unique transponder identification 
assigned to each transponder that is authorized to oper- 
ate a given motor vehicle, thus providing extremely high 
probability against unauthorized activation. 

Another aspect of the present invention allows 
transponder identifications to be added and deleted 
from storage in the control circuit. This functionality ena- 
bles additional specific transponders to control func- 
tions on the same motor vehicle and enables a lost 



transponder to be prevented from controlling those 
functions. 

Brief Description of The Drawing s 

5 

FIGURE 1 is a block schematic diagram of a key- 
less motor vehicle control system according to the 
present invention; 

FIGURE 2 is a schematic representation of the 
10 process performed in the encryptor in Figure 1 ; 

FIGURE 3 is a flowchart of the procedure for oper- 
ating the motor vehicle which is performed by the 
keyless control system; and 
FIGURE 4 is a flowchart of the procedure by which 
is the keyless control system learns to recognize a 
new remote control. 

Detailed Description Of The Invention 

20 With initial reference to Figure 1 , a keyless motor 
vehicle control system 10 comprises a remote control 
12, which preferably has the form of a key ring fob car- 
ried by a driver, and a control circuit 14 located in the 
motor vehicle. The control circuit 14 includes a micro- 

25 computer 1 6 with an internal microprocessor and mem- 
ory in which the control program and data are stored. A 
conventional clock circuit 22 supplies timing pulses to 
the microcomputer 16. A plurality of manual jnput 
switches 24 and 25 enable a service technician to place 

30 the microcomputer 1 6 into different operating modes, as 
will be described. The control circuit 14 operates several 
functions on the motor vehicle such as locking and 
unlocking the doors, unlatching the trunk lid and starting 
the engine, for example. For that functionality, the micro- 

35 computer 16 is interfaced to the corresponding actuat- 
ing devices on the motor vehicle. In some, motor 
vehicles, the various functions are controlled by an 
another computer in the motor vehicle to which the 
microcomputer 16 sends operating commands via a 

40 parallel communication bus 18, as will be described 
subsequently. In other motor vehicles, the microcom- 
puter 16 has individual output tines 20 connected 
directly to the control devices for the respective func- 
tions being operated. Specifically, separate wires may 

45 be coupled to actuators which lock and unlock the 
doors, unlatch the trunk lid and start the engine. 

A serial output line 26 and a serial input line 2a of 
the microcomputer 16 are connected to a first radio fre- 
quency transceiver 30. The first transceiver 30 modu- 

50 lates a standard RF frequency carrier with the serial 
data received on line 26 and transmits that modulated 
radio frequency signal via an antenna 32. The first 
transceiver 30 also demodulates other radio frequency 
signals received by the antenna 32 to recover serial dig- 

55 ital data which then is sent via line 28 to the microcom- 
puter 16. 

The first transceiver 30 of the control circuit 14 is 
designed to communicate with a second radio fre- 
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quency transceiver 40 and antenna 42 both located 
within the remote control 12. The second transceiver 40 
has a receiver section which demodulates the received 
radio frequency signal to recover digital data that modu- 
lates that signal and the recovered data is sent in a 5 
serial format to an input register 44. The input register 
44 converts the serial data stream from the second 
transceiver 40 into a parallel format which is read by a 
controller 46. The controller 46 may be either a hard- 
wired device for sequentially performing the remote 10 
control operations to be described, or a programmable 
device which executes a software program to perform 
those operations. Controllers of this general type are 
well-known in different types of transponders and their 
conventional technology can be utilized to implement 75 
the functions of the present controller 46. The controller 
46 of the remote control 12 is connected to an electri- 
cally erasable programmable read only memory (EEP- 
ROM) 48 which stores data to be transmitted to the 
motor vehicle control circuit 14 when the remote control 20 
is interrogated. 

The remote control 12 also includes an encryptor 
50 connected to the controller 46 to encrypt a remote 
control security number for transmission to the control 
circuit 14. The encryptor 50 utilizes a secret-key cryp- 25 
tography algorithm to encrypt data for sending to the 
control circuit- The algorithm specifies a sequence of a 
plurality of logical operations which are performed on a 
known seed number and a challenge number received 
from the control circuit to produce a number for trans- so 
mission by the remote control. Several cryptography 
algorithms of this type are described by Mehrdad 
Foroozesh in an article entitled "Protecting Your Data 
With Cryptography," UNIX Review, Nov. 1996, v14, n12, 
page 55(6), which description is incorporated herein by 35 
reference. Such encryption techniques and algorithms 
are commonly used to encrypt computer data being 
transmitted over common carriers. 

A control circuit 14 also receives timing signals from 
a clock circuit 52. A plurality of user operable switches 40 
54 are connected to different input lines to the controller 
46 in order for the driver to select the specific functions 
to be performed on the motor vehicle. For example, a 
separate switch can be provided for the functions of 
unlocking and locking the doors, unlatching the trunk lid, 45 
and starting the engine. 

. . Digital output data is sent by the control circuit in 
parallel form to a parallel-in/serial-out output register 56. 
The serial data from the output register 56 is applied to 
the input of a transmitter section in the second trans- so 
ceiver 40 which modulates a radio frequency signal 
which that data. The resultant RF signal is sent via the 
antenna 42 to the control circuit 14 in motor vehicle. The 
components of the remote control preferably are pow- 
ered by a battery (not shown), but as an alternative, 55 
power could be derived from received RF signal energy 
as was done in some prior remote controls. 

The procedure by which the keyless motor vehicle 



control system 10 operates different functions on the 
motor vehicle is depicted by the flowchart of Figure 3: 
When activation of one of those functions is desired, at 
step 60 the driver presses the appropriate remote con- 
trol switch 54 which corresponds to that function. This 
activation of the switch sends a signal to the controller 
46 which responds by obtaining an initial numerical 
code from storage in the EEPROM 48. Preferably, 
although not required, the initial numerical code corre- 
sponds to the vehicle identification number (VIN) for the 
particular motor vehicle being controlled. Alternatively 
the initial numerical code may be a unique identification 
number assigned to that remote control and stored in 
the EEPROM 48. In either case, the initial numerical 
code is sent via output register 56 to the second trans- 
ceiver 40 from which it is transmitted at step 62 to the 
control circuit 14 in the adjacent motor vehicle. 
' The RF remote control signal is received by a super 
heterodyne receiver section in the first transceiver 30. 
Receipt of the initial numerical code causes the motor 
vehicle control circuit 14, which had been in a "sleep 
state," to wake up at step 64 and its microcomputer 16 
begins executing a software routine for interrogating the 
remote control 12. The process of waking up may verify 
that the remote control sent the proper initial code for 
this motor vehicle. In step 66 of the interrogation proc- 
ess, the microcomputer 16 generates a random number 
which preferably is at least four bytes long and which is 
referred to a "challenge number." This challenge 
number then is sent via line 26 to the first transceiver 30 
where it is transmitted at step 68 to the remote control 
12. 

The remote control 12 receives the RF signal from 
the control circuit 14 via the antenna 42 and second 
transceiver 40 which recovers the challenge number 
from that signal. The challenge number is fed via the 
input register 44 to the controller 46. Upon receiving the 
challenge number, the controller 46 activates the 
encryptor 50 to generate an answer number. Specifi- 
cally, the controller 46 sends the encryptor 50 the chal- 
lenge number and a predefined secret seed number 
that is stored in the EEPROM 48. As graphically 
depicted in Figure 2, the encryptor 50 performs a series 
of logical operations, denoted by &, which combine the 
seed and challenge numbers according to the selected 
encryption algorithm utilized by the encryptor at step 70. 
As stated previously, the encryption algorithm may be 
any of several algorithms commonly used to encrypt 
computer data for transmission. The result is a four to 
five byte numerical answer which is in essence the chal- 
lenge number encrypted by the seed number using the 
selected encryption algorithm. At step 72, the answer 
number then is sent by the controller 46 via the output 
register 56 to the second transceiver 40. The answer 
number then is transmitted via the radio frequency sig- 
nal to the control circuit 14 on the motor vehicle. 

The EEPROM 48 also stores a unique identification 
number (ID) for this remote control. If this identification 
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number was not transmitted with the initial signal at step 
62. the controller 46 now retrieves that identification 
number and, causes it to be transmitted via the second 
transceiver ,40. The identification number may be trans- 
mitted directly or first encrypted by the encryptor 50 
using the cryptography algorithm and seed number, in 
which case the control circuit 14 is programmed to 
decrypt the received data. A plurality of remote controls 
12 may be authorized to activate features of the same 
motor vehicle in much the same way as a number of dif- 
ferent physical keys are able to open the doors. 
Although each of the authorized remote controls for the 
same motor vehicle has the same seed number stored 
in their EEPROIvVs 48, each remote control has a 
unique identification number. The controller 46 also 
causes a numerical indication of the particular switch 54 
which was operated by the driver, and thus an indication 
of the function to be performed, to be transmitted at step 
72, 

The control circuit 1 4 in the motor vehicle receives 
the RF signal from the remote control 12 and the first 
transceiver 30 recovers the numerical answer, remote 
control identification number and switch indication 
which are stored temporarily within the memory of the 
microcomputer 16 at step 73. While the remote control 
12 was encrypting the numerical answer and selecting 
the other items of data to be transmitted, the control cir- 
cuit 14 at step 74 takes the challenge number produced 
at step 66 and applies the same encryption algorithm 
and seed number, as used by the encryptor 50 in the 
remote control 12, to produce an expected answer at 
step 74. This application of the encryption algorithm can 
be accomplished in software by the microcomputer 16, 
or a duplicate of the hardwired circuitry of the encryptor 
50 can be incorporated in the control circuit 14 and 
operated under the microcomputer control to produce 
the expected answer. Since both the remote control 12 
and the control circuit 14 utilize the same encryption 
algorithm, seed number and challenge number, the 
expected answer and the answer received from the 
remote control should be identical. Therefore, at step 76 
the received and expected answers are compared and 
a determination is made at step 76 whether they exactly 
match each other. If the two answers do not match, as 
would occur if a bogus remote control 12 was employed 
in an attempt to access the motor vehicle, the execution 
of the program by the microcomputer 16 jumps to a 
point where the control circuit 14 return to the sleep 
mode without operating any of the motor vehicle func- 
tions. 

However, if a determination is made at step 78 that 
the two answers match, the program execution by the 
microcomputer 16 advances to step 80 where the 
remote control identification number received by the 
control circuit 14 is compared to a list of valid remote 
control identification numbers stored within the micro- 
computer memory. This list contains the valid identifica- 
tion number for each remote control that is authorized to 



operate the motor vehicle. If the received remote control 
identification number is not on this list, the program exe- 
cution jumps to the sleep mode. By requiring the valida- 
tion of the remote control's unique identification number, 
5 a specific remote control that is tost can be rendered 
inoperative, as will be described, even though it pro- 
duces the correct answer number in response to interro- 
gation. 

When a remote control identification number, 
10 received by the control circuit 14. matches one of the 
valid identification numbers contained with the micro- 
computer memory, the program execution advances to 
step 81. At this juncture the microcomputer 16 checks 
an input to determine whether a remote control delete 
75 mode switch 24 is closed. If that is not the case, the exe- 
cution branches to step 82 at which the microcomputer 
16 checks another input to determine whether a remote 
control add mode switch 25 is closed. The function of 
these switches 24 and 25 will be described subse- 
20 quently. 

. When neither mode selection switch 24 or 25 is 
found to be closed the program execution advances to 
step 83 where the switch indication number received 
from the remote control 1 2 is evaluated to determine the 

25 indicated function to be performed by the motor vehicle,* 
If the door unlock function has been indicated, the pro-., 
gram execution branches to step 84 where a unlock 
command signal is sent out by the microcomputer 16, 
either over communication bus 18 to the main computer. 

30 for the motor vehicle, or over one of the dedicated out- 
put lines 20 to the lock control circuit of the motor vehi-. 
cle. Then, at step 86, the remote control identification . 
number is sent by the microcomputer 16 over the com- 
munication bus 18 to another computer on the motor 

35 vehicle which automatically controls various adjustable 
devices, such as the driver's seat and rear view mirrors. . 
In response, the other computer automatically moves 
those adjustable devices into positions previously 
stored for the driver who uses the remote control with 

40 this identification number. Thus the remote control iden- 
tification number is utilized to personalize vehicle set- 
tings for the particular driver associated with the 
identified remote control. 

Alternatively, when the switch indication decoded at 

45 step 83 indicates that the doors of the motor vehicle are 
to be locked, the program execution passes through 
step 88 where the appropriate output signals are pro- 
duced by the microcomputer 1 6 to cause actuators in 
the doors to engage the locks. Similarly, step 90 is exe- 

50 cuted when the switch indication decoded at step 83 
designates that the trunk is to be unlatched. Likewise, 
the operating procedure branches to step 92 when the 
switch indication designates that the engine is to be 
started. As with the other functions at this time, the 

55 microcomputer 16 would send the appropriate activa- 
tion signals over communication bus 18 and the dedi- 
cated control lines . 20 to cause the starting of the 
engine. Because the present keyless control system 1 0 
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provides a very high degree of security against unau- 
thorized individuals being able to start the engine, the 
conventional key operated ignition switch with a 
mechanical interlock to the steering mechanism may be 
eliminated. It will be noted that a separate push button 5 
switch within the motor vehicle would be utilized to turn 
off the engine at a later point in time. After the particular 
functions have been activated, the control circuit then 
returns to the sleep mode until another signal is 
received from a remote control 1 2. 10 

The present keyless vehicle activation system uti- 
lizes a rolling security code without requiring synchro- 
nized independent generation of the rolling code by 
both the remote control and the motor vehicle control 
circuit A very large number of combinations can be is 
implemented with a single combination assigned to a 
given motor vehicle, thus providing extremely high prob- 
ability against unauthorized activation. 

Ultimately, only a remote control may be employed 
to gain entry and start the motor vehicle without even . 20 
the ability to use a physical key. In this eventuality, a pro- 
vision must be made for an indication to be given to the 
driver when the battery within the remote control has 
been depleted to such a level where inoperabilrty is 
approaching. One does not want the battery to become 25 
completely depleted and thereby depriving the driver of 
motor vehicle use. As a consequence, the remote con- 
trol can be provided with a battery level detection circuit 
which senses when the battery voltage drops below a 
level which is slightly greater than the voltage level at 30 
which the remote control will no longer be functional. 
Upon that occurrence, a special numerical code is sent 
the next time the remote control 12 is utilized which pro- 
vides an indication to the control circuit 14 that the 
remote control voltage has reached a dangerously low 35 
level. In response, the microcomputer 16 can send a 
signal to the main computer for the motor vehicle which 
generates a visual indication to the driver, such by illu- 
minating the appropriate message on the instrument 
panel. This provides a warning to the driver the remote 40 
control needs battery replacement and affords a short 
period in which to replace the battery while the remote 
control still is usable. Since the remote control 12 stores 
the data in an EEPROM 48, the contents of the memory 
are not lost when the battery completely runs down or 45 
during battery replacement. 

With reference to Figure 1, because the remote 
control 12 has an EEPROM 48, additional storage loca- 
tions can be provided for storage of ancillary information 
about the motor vehicle or the driver associated with the so 
particular remote control. In this case, after activation of 
the designated function at steps 84-92 on the flowchart 
of Figure 3, additional steps are executed in which the 
control circuit microconrputer 16 generates a command 
which is transmitted via the first transceiver 30 and ss 
antenna 32 to the remote control 12. This command 
orders the controller 46 in the remote control to obtain 
one or more items of ancillary information from the 



10 

EEPROM 48 and transmit it back to the control circuit 
14. Thus the control circuit 14 is able to obtain informal 
ton about the driver's identity, past vehicle perform- 
ance, etc. which has been stored in the remote control 
memory. 

With this additional remote control functionality, the 
microcomputer 16 is able to update the ancillary infor- 
mation stored in the remote control 12. To do so the 
control circuit 14 transmits the updated information 
along with a storage command. The controller 46 of the 
remote control 12 responds to the storage command by 
storing the accompanying updated information in desig- 
nated locations within the EEPROM 48. 

The information stored within the remote control 12 
also may be read out and altered by special devices at 
the motor vehicle dealers which are similar to the struc- 
ture of the control circuit 14 in Figure 1. However, that 
device is not associated with a motor vehicle and con- 
tains additional components for displaying information 
read from the remote control and entering information to 
be stored in the remote control. In such a device, a 
video monitor, printer and an alphanumeric keyboard 
are connected to the microcomputer 16 which is also 
programmed with the appropriate software for imple- 
menting the data read and write operations. Similar 
remote control readout devices could be provided to law 
enforcement agencies in order to determine the identity 
of the driver who normally utilizes the remote control, 
and to medical personnel to obtain medical information, 
such as blood type, allergies and current medications, 
about the driver from the remote control. 

In the event that the driver loses one of the author- 
ized remote controls for a given motor vehicle, the cor- 
responding remote control identification number can be 
removed from the list of authorized remote controls con- 
tained within the memory of the vehicle control circuit 
microcomputer 16. As a result should a finder or thief of 
the missing remote control be able to match it with the 
particular vehicle, the remote control no longer will be 
able to function properly. 

To delete a remote control identification number 
from the microcomputer memory list as would be desir- 
able when a remote control is lost or stolen, a motor 
vehicle dealer accesses the control circuit 14 and 
closes the deletion mode switch 24. While that switch is 
closed, each of the remaining remote controls is placed 
one at a time near the vehicle and one of its function 
switches 54 is pressed. This operation sequentially 
sends the remote control identification number from 
each of the remaining remote controls to the control cir- 
cuit 14 in the motor vehicle. Each time a remote control 
is activated, the operating procedure branches from 
step 81 in Figure 3 to a delete mode routine which 
causes microcomputer 16 to store each of the received 
remote control identification numbers. After all of the 
remaining remote controls have been activated, the 
motor vehicle dealer opens the deletion mode switch 24 
which causes the microcomputer 16 to scan its previous 
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list of remote control identification numbers to deter- 
mine which ones were not received while the deletion 
mode switch 24 was closed. The non-received remote 
control identification numbers are deleted from the 
microcomputer memory so that the corresponding 5 
remote controls no longer are able to operate the motor 
vehicle. 

Another mode of operation can be activated to add 
additional remote control identification numbers to the 
list of authorized remote controls within the memory of 10 
the microcomputer 16. This process is analogous to 
duplicating the physical keys previously used to access 
motor vehicles and is initiated by a motor vehicle dealer 
closing the remote control add mode switch 25 within 
the control circuit 14. Then, one of the existing author- is 
ized remote controls is activated by pressing any one of 
the function switches 54. This operation results in the 
execution of steps 60 through 82 in Figure 3 at the end 
of which a determination is made at step 82 that the 
remote control add mode switch 25 is closed and the 20 
procedure branches to the remote control add routine 
depicted on Figure 4. 

The remote control add routine at step 100 causes 
control circuit 14 to send the secret seed number uti- 
lized by the encryption algorithm and a previously unas- 25 
signed remote control identification number to the first 
transceiver 30 along with a command instructing a new 
remotejcontrol to store those transmitted numbers. Any 
previously programmed remote control within the vicin- 
ity of the motor vehicle is inhibited from responding to 30 
this command so that the information contained within 
the previously programmed remote control will not be 
overwritten by the new data being transmitted by the 
control circuit 14. 

When an unprogrammed or erased remote control 35 
12 receives this data stream from the control circuit 14 
at procedure step 102, the controller 46 recognizes the 
command as indicating programming of the remote con- 
trol. In response the seed number from the control cir- 
cuit is stored into the designated location within 40 
EEPROM 48 and the identification number is placed 
into another designated location within that memory. 
Thus the new remote control is programmed with the 
appropriate seed number for activating the particular 
motor vehicle and a unique remote control identification 45 
number which will be recognized by that motor vehicle. 

Then the microcomputer 1 6 within the control circuit 
randomly generates a challenge number at step 104 
which is transmitted to the newly programmed remote 
control at step 106. The received challenge number is so 
passed to the remote control's encryptor 50 which uses 
the challenge number and the previously stored seed 
number to produce a numerical answer at step 108. At 
step 110 that numerical answer is transmitted back to 
the control circuit 14. along with the newly stared ss 
remote control identification number. 

Upon receipt of the numerical answer and remote 
control identification number, at step 1 12 the control cir- 



cuit 14 compares the received answer with an expected 
answer generated at step 114 to verify that the new 
remote control has been programmed properly. If the 
answers do not match at step 1 16, the procedure termi- 
nates without adding a new entry to the list of author- 
ized remote controls. The remote control identification 
number received by the control circuit 14 also is verified 
for its accuracy at step 118. If the new remote control 
passes both these verification tests, at step 120 the 
microcomputer 16 adds the new remote control identifi- 
cation number to the list of authorized remote controls 
that is maintained in the microcomputer memory. 

Then at step 122, the control circuit 14 transmits an 
storage command and ancillary information which is to 
be stored in the new remote control. The remote control 
responds at step 124 by storing the ancillary information 
within its EEPROM 48 and the remote control addition 
procedure terminates. 

Wrth reference again to Figure 1 . the embodiment 
of the keyless motor vehicle control system 1 0 
described above requires that the user manually acti- 
vate one of the switches 53 on the remote control 12. As 
an alternative, the switches may be replaced with a 
motion detector, such as a ball in a cage type switch. 
Thus whenever the driver is walking or handling the 
remote control 12, the motion detector indicates that 
motion to the controller 46. In response, the controller 
46 causes the remote control 12 to transmit the initial 
numerical code. Then the remote control 12 listens for 
the control circuit 14 to transmit the challenge number. 
If a challenge number is not received within a defined 
period of time after transmission of the initial numerical 
code, the remote control 12 ceases operating until 
another signal from the motion detector is produced. 
However, when the remote control 12 receives a chal- 
lenge number, the encryptor 50 is activated to produce 
an answer which is sent to the control circuit 14 and the 
process proceeds as described previously. 

A further embodiment also is feasible in which the 
remote control is passive. In this situation, the control 
circuit 14 periodically transmits an RF activation signal, 
which upon receipt causes remote control 12 to respond 
automatically by transmitting the initial numerical code. 
In response to the initial numerical code, the control cir- 
cuit 14 sends the challenge number and waits for the 
answer. When the control circuit 1 4 verifies the receipt 
of a correct answer and identification data from an 
authorized remote control 12, signals are sent to com- 
ponents in the motor vehicle which unlock at least one 
door and enable a manual switch on the dashboard to 
be pressed to start the engine. In this embodiment, the 
periodically transmitted signal from the control circuit 
activates remote control to commence the operating 
procedure of Figure 3, rather than the driver pressing a 
remote control switch 54. Therefore, the driver merely 
has to be within the transmission range of the motor 
vehicle control circuit 14. In this embodiment, after the 
engine is turned off manually, the control circuit 14 is 
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disabled for a given period of time allowing the driver to 
move outside the transmission range before the control 
circuit again commences the periodic transmission of 
the activation signal. 

The foregoing description is directed primarily to s 
preferred embodiments of the invention. Although some 
attention was given to various alternatives within the 
scope of the invention, it is anticipated that skilled arti- 
sans will likely realize additional alternatives that are 
now apparent from the disclosure of those embodi- 10 
ments. Accordingly, the scope of the invention should be 
determined from the following claims and not limited by 
the above disclosure. 

Claims is 

1 . A method for operating a keyless motor vehicle con- 
trol system including a remote control for carrying 
by a user and a control circuit in the motor vehicle, 
said method comprising the steps of: so 

storing seed data in the control circuit; 
storing the seed data in the remote control; 
programming a first remote control identifica- 
tion into the remote control; 25 
storing the first remote control identification 
into the control circuit; 

in response to activation of the remote control 
by movement of the user, exchanging chal- 
lenge data between the control circuit and the 30 
remote control; 

the control circuit executing an encryption algo- 
rithm which uses the seed data and the chal- 
lenge data to produce a first answer; 
the remote control executing the encryption 35 
algorithm which uses the seed data and the 
challenge data to produce a second answer; 
the remote control transmitting the second 
answer to the control circuit; 
the control circuit comparing the first and sec- 40 
ond answers and producing a first indication 
when a match occurs; 

the remote control transmitting the first remote 
control identification to the control circuit; 
determining whether the first remote control 45 
identification received from the remote control 
matches a first remote control identification 
previously stored in the control circuit and if so 
producing a second indication; and 
in response to presence of both the first and so 
second indications, activating a component of 
the motor vehicle to perform a defined function. 

2. The method as recited in claim 1 further comprising 

the control circuit randomly generating the chal- ss 
lenge number. 

3. The method as recited in claim 1 wherein the 



defined function is selected from a group consisting 
of unlocking a door, locking a door, unlatching a 
trunk lid, and starting an engine. 

4. The method recited in claim 1 further comprises the 
user defining a function on the remote control; and 
transmitting to the control circuit a designation of 
the function defined by the user. 

5. The method as recited in claim 1 wherein the steps 
of the control circuit and the remote control execut- 
ing an encryption algorithm comprise performing a 
plurality of logical operations on the seed data and 
the challenge data. 

6. The method as recited in cjaim 1 wherein the step 
of storing the seed data in the remote control com- 
prises: 

(a) exchanging a challenge number between 
the control circuit and a previously pro- 
grammed remote control; 

(b) the control circuit executing the encryption 
algorithm which uses the seed data and the 
challenge number to produce a third answer; 

(c) the previously programmed remote control 
executing the encryption algorithm which uses 
the seed data and the challenge number to pro- 
duce a fourth answer; 

(d) the previously programmed remote control 
transmitting the fourth answer and a second 
remote control identification to the control cir- 
cuit; 

(e) the control circuit comparing the third and 
fourth answers and producing a third indication 
when a match occurs; 

(f) determining whether the second remote 
control identification received from the previ- 
ously programmed remote control matches a 
remote control identification previously stored 
in the control circuit and if so producing a fourth 
indication; 

(g) upon the occurrence of both the third and 
fourth indications, the control circuit transmit- 
ting the seed data to the remote control; and 

(h) the remote control storing the seed data. 

7. The method as recited in claim 6 wherein the step 
of programming a first remote control identification 
into the remote control comprises upon the occur- 
rence of both the first and second indications, the 
control circuit transmitting the first remote control 
identification to the remote control; and the remote 
control storing the first remote control identification. 

8. The method as recited in claim 7 further comprising 
the control circuit verifying that the seed data and 
the first remote control identification were properly 
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stored by the remote control. 

9. The method as recited in claim 6 further comprising 
the control circuit verifying that the seed data was 
properly stored by the remote control. s 

1 0. The method as recited in claim 6 further comprising 
the remote control transmitting the first remote con- 
trol identification to the control circuit; and the stor- 
ing the first remote control identification into the 10 
control circuit. 

1 1 . The method as recited in claim 6 further comprising 
deleting the first remote control identification from 
storage in the control circuit. 15 

12. A method for remotely operating locks of a motor 
vehicle with a keyless entry system that includes a 
control circuit in the motor vehicle and a remote 
control for carrying by a user, said method compris- 20 
ing the steps of: 

storing identical seed data in both the control 

circuit and the remote control; 

in response to the user activating the remote 25 
. control, generating and exchanging challenge 
\ data between the control circuit and the remote 
; control; 

the control circuit executing an encryption algo- 
rithm which uses the seed data and the chal- 30 
lenge data to produce a first answer; 
the remote control executing the encryption 
algorithm which uses the seed data and the 
challenge data to produce a second answer; 
the remote control transmitting the second 35 
answer to the control circuit; 
the control circuit comparing the first and sec- 
ond answers and producing a first indication 
when a match occurs; and 

in response to the first indication, unlocking a 40 
door on the motor vehicle. 

13. The method recited in daim 12 further comprising: 

programming a remote control identification 45 
into the remote control; 

storing the remote control identification into the 
control circuit; 

when the user activates the remote control, the 
remote control transmitting the remote control so 
identification to the control circuit; 
the control circuit determining whether the 
remote control identification received from the 
remote control matches a remote control iden- 
tification previously stored in the control circuit ss 
and if so producing a second indication; and 

wherein the step of unlocking a door on 
the motor vehicle also is in response to the sec- 



ond indication. 

14. A method for remotely operating . a motor vehicle 
with a keyless control system that includes a control 
circuit in the motor vehicle and a remote control for 
carrying by a user, said method comprising the 
steps of: 

the control circuit transmitting an interrogation 
signal; 

in response to receiving the interrogation sig- 
nal, the remote control transmitting an initial 
signal; 

the control circuit responding to the initial signal 
by transmitting challenge data to the remote 
control; 

the control circuit executing an encryption algo- 
rithm which uses seed data and the challenge 
data to produce a first answer; 
the remote control executing the encryption 
algorithm which uses the seed data and the 
challenge data to produce a second answer; 
the remote control transmitting the second 
answer to the control circuit; 
the control circuit comparing the first and sec- 
ond answers and producing a first indication 
when a match occurs; and 
in response to the first indication, performing a 
function on the motor vehicle. 

15. A method for remotely operating a motor vehicle 
with a system which includes a control circuit in the 
motor vehicle and a remote control for carrying by a 
driver, said method comprising the steps of: 

storing information regarding the at least one of 
the motor vehicle operation history and the 
driver; 

upon activation by the driver, the remote control 
transmitting a signal; 

a receiver sending a command to the remote 
control in response to receiving the signal; 
the remote control transmitting the information 
in response to recaving the command; and 
the receiver receiving the information. 

16. The method recited in claim 15 further comprising: 

storing identical seed data in both the control 
circuit and the remote control; 
in response to receiving the signal, the control 
circuit generating and transmitting challenge 
data to the remote control; 
the control circuit executing an encryption algo- 
rithm which uses the seed data and the chal- 
lenge data to produce a first answer; 
the remote control executing the encryption 
algorithm which uses the seed data and the 



9 



JOOCtD: <€P 0870889A2_t_> 



17 



EP 0 870 889 A2 



18 



challenge data to produce a second answer; 
the remote control transmitting the second 
answer to the control circuit; 
the control circuit comparing the first and sec- 
ond answers and producing an indication when s 
a match occurs; and 

in response to the indication, unlocking a door 
on the motor vehicle. 

17. A method for operating a keyless motor vehicle con- 10 
trot system including a portable remote control on 
which a user selects a function for the motor vehicle 

to perform, and including a control circuit in the 
motor vehicle, said method comprising the steps of: 

75 

storing seed data in the control circuit; 
storing the seed data in the portable remote 
control; 

programming a remote control identification 
into the portable remote control; 20 
storing the remote control identification into the 
control circuit; thereafter 
in response to a user selecting a function on 
the portable remote control, transmitting an ini- 
tial signal to the control circuit; 25 
the control circuit responding to receiving the 
initial signal by generating challenge data and 
transmitting the challenge data to the portable 
remote control; 

the control circuit executing an encryption algo- 30 
r'rthm which uses the seed data and the chal- 
lenge data to produce a first answer; 
the portable remote control executing the 
encryption algorithm which uses the seed data 
and the challenge data to produce a second 35 
answer; 

the portable remote control transmitting the 
second answer and the remote control identrfi- 
cation to the control circuit; 
the control circuit comparing the first and sec- 40 
ond answers and producing a first indication 
when a match occurs; 

determining whether the remote control identi- 
fication received from the portable remote con- 
trol matches a remote control identification 45 
previously stored in the control circuit and if so 
producing a second indication; and 
in response to presence of both the first and 
second indications, producing a control signal 
for activating the function selected by the user, so 

18. The method recited in claim 17 wherein the user 
selects the function to be performed from a group 
consisting of unlocking a door, locking a door, 
unlatching a trunk lid. and starting an engine. 55 

19. The method recited in claim 17 further comprising 
the remote control transmitting to the control circuit 



a designation of the function selected by the user. 

20. The method recited in claim 17 wherein the function 
selected by the user is starting the engine; and fur- 
ther comprising responding to the control signal by 
starting the engine without requiring use of a key. 
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(54) Keyless motor vehicle entry and ignition system 



(57) A keyless control system (10) is disclosed 
which may be employed to gain entry to a motor vehicle 
and start an engine. When using this system, a user 
activates a remote control (12) by selecting a function 
for the motor vehicle to perform. In response, a chal- 
lenge number is exchanged and used in an encryption 
algorithm by both the remote control (12) and a control 
circuit (14) in the motor vehicle to produce independ- 
ently of each other separate algorithm answers. A first 
verification indication is produced when the control cir- 
cuit (1 4) finds both answers to be the same. The remote 



control (12) also sends its unique remote control identi- 
fication and a designation of the selected function to the 
control circuit (14). If the received remote control identi- 
fication matches is on an authorized remote control list 
stored in the control circuit, a second verification indica- 
tion is produced. When both the first and second verifi- 
cation indications are produced, the control circuit 
issues a signal that causes the motor vehicle to perform 
the selected function. 
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